ClawHub

Stripe Payment Links

v1.0.0

Stripe Payment Links integration. Manage data, records, and automate workflows. Use when the user wants to interact with Stripe Payment Links data.

⭐ 0· 59·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name and description (Stripe Payment Links integration) match the SKILL.md, which directs use of the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to Stripe. No unrelated credentials, binaries, or system paths are requested.
✓
Instruction Scope
The runtime instructions are limited to installing and using the Membrane CLI, logging in via browser, creating/inspecting connections, listing and running actions, and proxying requests to Stripe via Membrane. The instructions do not ask the agent to read arbitrary local files, harvest unrelated environment variables, or send data to unexpected endpoints. They do require network access and a Membrane account, which is appropriate for the stated purpose.
ℹ
Install Mechanism
There is no registry install spec, but the SKILL.md tells users to run `npm install -g @membranehq/cli`. Installing a global npm package is a moderate-risk operation because it writes code to disk and can execute commands. However, the package is a scoped official-looking CLI (@membranehq/cli) and this install instruction is coherent with the skill's workflow. Users should verify the package source (npm publisher, repository) before installing globally.
✓
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for API keys (Membrane handles auth). It only requires a Membrane account and browser-based auth, which is proportionate to a connector-based integration with Stripe.
✓
Persistence & Privilege
The skill is not marked always:true, does not request system-wide config changes in the SKILL.md, and does not ask to modify other skills' settings. Normal autonomous invocation is allowed by default but not combined with other elevated privileges.
Assessment
This skill appears internally coherent: it expects you to install and use the Membrane CLI to connect to Stripe Payment Links and does not ask for Stripe API keys. Before installing or running anything: (1) verify the @membranehq/cli package on npm (publisher, download counts, repository) and review its source if possible; (2) prefer installing the CLI in a controlled environment (container or VM) or avoid global install if you want to limit system impact; (3) confirm your Membrane account is trustworthy and understand what data Membrane will proxy to Stripe; (4) if you must allow the agent to run commands, consider doing so only after manual review; and (5) remember this SKILL.md is instruction-only so a static scanner had no runtime code to analyze — the actual risk depends on the external CLI and Membrane service behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk9763bc1nsc6hv46cztpatc1eh84a2st

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments